News for hackers. Stuff that matters.

ygjb

Re:The Curse of Soldered RAM on Tuesday October 27, 2026 @09:15AM (#50258733)
Listen here whippersnapper.

Oh shit.

Damn. I don't have grandkids yet but ok.

I didn't come to HN to confront my own mortality and age ;P

Those aren't museum artefacts, it's just retro.

Get off my lawn.

\o/

1. See a vuln domain reported, clone the site. 2. Wait for it to expire and snag it. 3. Republish the site with malware 4. Watch people dither about domain names and stuff instead of taking time to fix things.

Sure they are. The domain you want isn't.

GitHub.io domains, workers.dev domains, etc are all free domains.

Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.

Seriously, the bad guys figure this out all the time.

Yeah, because the six number chunk is near the limit of recall. Don't remember CVE-2026 since the year and CVE can be reconstructed from time memory. You know it came up this year. Remember that vuln 111-497 (as two chunks) came out this year, and remembering two short chunks is easier.
Re:Kimi K3.1 Pro and K3.1 Pro Highspeed on Saturday October 24, 2026 @09:27AM (#50221051)
An alernative, it could also be the case that all of the model developers are using distillation to improve their models while crying do as I say, and not as I do.
Re:DeepSeek: DeepSeek v4.1 Flash 1017 on Saturday October 17, 2026 @10:03AM (#50131281)
Yea, this is one thing that gets me. Vibe coding and freestyle prompting gets wildly different results. Starting from a set of specs and expectations routinely gets me reviewable and we'll tested code. Sure, running the full test suite alot slows things down and uses more tokens, but when I hit a five hour or weekly window, I just roll up my sleeves and start working without the model because the code is layed out the way I expected and is designed to fit my meatbag workflow and pace.
Consumer protection is already clearly the focus of Congress, and with the demise of the Chevron deference in 2024, it seems that Congress needs to bind (such that they can) groups operated by the Executive Branch to uphold consumer rights explicitly instead of allowing regulators to navigate the commercial market.

The answer to Why is Congress concerned with details like this? is that the Supreme Court of the United States made it their concern by rejecting an established practice of deferring to expert regulators instead of electable people who probably lack the relevant knowledge and experience.

Re:Tesla Roadster on Thursday October 15, 2026 @10:46PM (#50113344)
Yeah, once you leave the ground you aren't on your property anymore.
There is a massive tension between software you didn't authorize and computer security.

Turning off automatic software updates requires that you actively stay on top of what's installed and what's running, including patching with discipline to make sure your computer doesn't remain vulnerable. On the other hand, automatic updates is seen as writ large by software developers to install what they want without a clear and meaningful choice by users by bundling new features. See Google's integration of Gemini Nano in 2024 as an example.

Re:Bitwarden Dual License Model on Saturday October 10, 2026 @02:23PM (#50035663)
Same question, I use CloudFlare for alot of API DNS stuff but register with name cheap because it's been a a good service provider so far.
glanced sideways at 40 years of media documenting and using televised state sponsors violence as satire and dystopia

I wonder what could possibly go wrong by setting the precedent for the state to execute people by firing squad on national news.

Re:Vibecoding isn't as fun as writing code by hand on Tuesday October 06, 2026 @12:56PM (#49981127)
It depends on what you consider boilerplate. Unity, Godot, or Unreal cut down on "boilerplate" for alot of things, but they also leave a lot to the developer unless you are aiming for an asset flip.

For me, boilerplate isn't scaffolding out getters and setters, or deferring to templated code generation; using refactoring tools that have been baked into IDEs or third party tools have been available for about 20 years deal with all of those nicely.

On the other hand, the "boilerplate" to stand up a secure web service with appropriate monitoring and scaling capabilities is a fair bit of work when you know that the immediate first users are enterprise businesses.

Building a service that meets or exceeds industry compliance requirements (internal or otherwise) is a lot of work! My harness, skills, and SOPs are set up such that if I spin up a new web-dev project, it gets all of the accessibility, internationalization, observability, authentication and authorization capabilities I would expect, appropriate to the tier. There is a lot of work done to build and implement those at the front end of a project, which I could skip over for experimentation, but for actual, deliverable work, it is a huge accellerator. In addition, by having that scaffolding and boilerplate in place, and a few skills and SOPs to support future feature growth, the agentic coding tools build with them in mind, and wire everything up as they go.

It doesn't replace the need to do the testing and validation, but it sure does break me out of the cycle of "fuck it ship" that takes over when I have my developer hat on, and the "holy shit, burn it all down and start over" that takes over when I put my security engineer hat back on.

shrug YMMV.

I continue to believe that Meta is the company that is building products I want from a company I have absolutely zero desire to do business with. I put Google in the same category - I used to be a google fanboy, but that subsided over the years as Google grew and killed products I used and liked. Now I only use their products because of inertia and network effect.

I don't trust any of the hyperscalers to place me as a user first, I expect them to guide me into a stall, strap on a feedbag, and start the value extraction process while they build the meatrix[1] around me.

I want tools like Muse, and Meta Glasses, Google Gemini and a horizontally integrated AI agent, but I want it on my terms, where I am in control and accountable, and without a layer of data collection and harvesting on top of it.

Fortunately I am skilled enough to assemble most of what I want, but I fear a world where people who lack the skills and resources I have available have no choice but to onboard and give up control in order to remain competitive, employed, and connected in the world to come :(

[1] https://www.youtube.com/watch?v=rEkc70ztOrc

yea but most of those can't be discussed in polite company...
Re:Mistral Large 4 on Tuesday October 06, 2026 @11:49AM (#49980278)
What nuclear holocaust has the only country to use a nuclear weapon against a target prevented?

Do you think the world is closer to or more distant from large scale global conflict today than it was 10 years ago, or even 3 years ago?

Re:Mistral Large 4 on Tuesday October 06, 2026 @11:47AM (#49980252)
17% is the approximate population of Earth in China. I was using a simple example as a counter to the anglocentric view the parent poster was expressing by trying to paint China as a villain.
Re:Vibecoding isn't as fun as writing code by hand on Tuesday October 06, 2026 @11:45AM (#49980220)
The ship has sailed. For personal use, maybe, but supply and demand are going to dictate that there is going to be a massive ramp in memory and compute production, and when the prices inevitably normalize due to the increase of availability, there will be a push to use local inference. It goes back and forth, and unless there is a strong roadblock put in place, the current generation of models are already powerful enough that incremental improvements in the run up to increased hardware availability will mean that these tools are here to stay. Even if draconian laws were put into place, the prevalence and availability of open models and the tools to train them means you can't put the genie back in the bottle.
Re:Vibecoding isn't as fun as writing code by hand on Tuesday October 06, 2026 @11:37AM (#49980114)
That is terribly reductionist.

giving that code as a prompt to Claude yields:

Worked for 5s · done 8:30 AM

  10 PRINT "Hello World"; 20 GOTO 10
Hello WorldHello WorldHello WorldHello WorldHello WorldHello WorldHello World Hello WorldHello WorldHello WorldHello WorldHello WorldHello WorldHello World ^C Break in 10 Ready.

Still looping. Anything you'd like me to do for real?

After that, I gave it a second instruction: create a GW-basic interpreter in python

It's 5 characters longer, and gives me the interpreter I need to run the basic code (actually not - I had to change the Basic code to have a second line for the loop in GW-Basic; I should have used a more recent basic, but I actually wrote a GW-Basic interpreter many years ago).

Re:Mistral Large 4 on Tuesday October 06, 2026 @10:07AM (#49978734)
It's an improvement, but game changer might be a bit of a stretch. If I lost access to Anthropic or OpenAI models tomorrow, I would be annoyed, but would reach for a slightly inferior model. Last year I wouldnt be able to say the same, and rhe challenge is that the moat is drying up fast. Whether its general improvements in model training by other competitors, or straight up distillation of SOTA models, the moat is shrinking and the available capital and spend for American model providers is going to dry up quickly as competing good enough models are adopted by more consumers.

It's especially the case as more non-Americans look to self hosted models and domestic cloud inference providers using open models that the US providers who are still leading the charge need to drastically drop their prices and find a path to profitability in order to maintain their lead and retain the advantage they had as AI turns into a commodity (which is happening faster than I think even the frontier labs initially predicted).

Re:Mistral Large 4 on Tuesday October 06, 2026 @09:58AM (#49978594)
Well, they are helping 17% of the world's population, and the US is currently actively engaged in trade wars and economic warfare or explicitly attempting to leverage it's hegemony against its long term alliea for short term gain.

There is as much to criticize about American hyper scalers and AI labs and the lack of interest in helping humanity or contributing to open source, but that might not be as popular an opinions on this site.

I think that mischaracterizing a business model as evil is an overloaded practice.

Is it evil to introduce terms and conditions that restrict how you expect your users to use your product? No, it's probably more hypocritical than evil; I don't think my parents telling me not to smoke while they struggled with addiction was evil, but it sure didn't model the best behaviour.

Is it evil to lobby government to curtail the freedoms of individuals to protect your business model? Yeah, probably; in most cases I believe that reducing consenting adults freedoms is usually a pretty evil act.

Microsoft is guilty of both, but I prefer to save Evil to describe actions that actively cause harm, either physically, mentally, emotionally, or in terms of harming the freedoms that people enjoy, especially if that choice to cause harm is economically motivated.

I'm not advocating on behalf of Bill Gates or Microsoft, just on clear terminology so that we can focus on actual evil behaviour versus consenting adults entering into a valid contract for mutual benefit.

Re:Kolibri Has Landed: A Sovereign Open-Weight Model on Saturday October 03, 2026 @10:57AM (#49944876)
I think you have it backwards. Sovereign is the goal, good can come later.

There is a proliferation of sovereign models under development specifically to address data sovereignty, and a loss of performance is absolutely acceptable over the risk that a once ally will turn adversarial, or a foreign business stops serving what has become critical infrastructure.

Politeness hasn't worked, and we are accelerating climate change, not slowing it.

You can act as upset as you want, I am more concerned about the impact to the world around us than I am about hurt feelings on a tech discussion forum.

I'm not entirely sure why you are so upset with me, but I assure you, it's not cosplay. My family lives on the west coast, and are going to be significantly impacted by climate change. My family back east lives in rural Manitoba (southern and northern), and their farms have been impacted by poor harvests due to weather and climate issues. My friends and family in northern Manitoba were evacuated due to forest fires last summer, and other friends in the BC interior were as well.

It's not performative concern and it's not revolutionary, it's just exhaustion from watching people deny and tone police discussions about something having real, human impacts. People will starve to death because of crop failures happening today, and its going to get worse :(

shrug.

Sure. There are weaknesses in the study, it doesn't change the fact that there was a significant increase in the number of deaths.

Hiding behind the claims that studies of complex systems are not completely valid because of a lack of rigor in the process or a weakness in the data are easy to overlook when governments around the world (including mine in Canada) are routinely fudging the numbers to achieve political goals.

People are dying from climate change in record numbers, and it's going to get a lot worse, and criticizing the quality of the studies does absolutely nothing helpful.

No, it isn't. It's a number, and implying that Japanese people would be more offended by this comparison that to they would be about the long term impacts of climate change on an island nation where up to 65% of the population lives in at risk coastal regions is basically a form of cultural white knighting.

If I am wrong, I apologize, but politeness and tone policing to shut down discussion of crises is a recurring problem in society.

That's the point of crass comparisons.

The comment I responded to was tone policing for crassness instead of actually contributing to the discussion.

Would it have been better to point out there has been a Russo-Ukraine wars worth of deaths from heat waves each year since 2022?

Or a Rwandan Civil Wars worth of deaths projected in the next year?

Or a Holocaust worth of deaths over the next decade?

What does it take to get people to listen and take it seriously?

Not for nothing but I am growing lemons and coffee beans in Vancouver, BC, and I only need to bring them in for about 2 months a year. What that actually means is that people are already evaluating how we will relocate crops (luxury and essential) to other climates.

What about when major crops like wheat, corn, rice, and beans fail around the world?

That argument can lead to the assumption that it's ok if we completely wiped out life on earth as long as humanity survives by leaving for the stars.

The earth is the only place in the universe right now where humans can survive at our current technology level, and we are destroying that ecosystem at an alarming rate. We depend on the entire planets ecosystem for our survival, and even if technology somehow could let us survive ecological collapse, a humanist approach to the environment is tantamount to burning the boat we are sailing on to keep warm.

To be completely blunt, the humanitarian crisis being caused by runaway fossil fuel use is tantamount to massacre of civilians.

The death toll from Hiroshima was between 90-160 thousand people. The amount of excess deaths due to heat waves in 2023 was around 178,000. There are projections that the El Nino related heat waves could cause up to half a million, and longer term projections grow to 300,000 a year just from heat in the next few years. Just from heat.

Add in crop failure, ecosystem collapses, and other unexpected disasters, and it's easy to see why.

It might be crass, but it's mostly poor people and poor countries that are going to be affected.

Not just Anthropic, but practically speaking, the leading foundational model labs like Anthropic and OpenAI are burning through enormous amounts of money, and will need to pay that money back. If they are designated as supply chain risks, or controlled technologies, their ability to achieve that ROI is severely constrained.

They are not turning a profit, and aside from enterprise token billing, every other offering they have is a loss leader. In order to flip that around they need to drive down the cost of inference significantly, either through massive compute improvements, more efficient or lower cost models, and either one lowers the barrier to entry for local and/or private cloud inference for open models. The moat established by the expertise in model training is effectively dissolving as they approach recursive self improvement because any mechanism that prevents model distillation effectively reduces the quality and utility of the models, so each improved model makes their competitors better by default if they want to realize those gains.

The reason for the pivot to control and regulation seems to be more about erecting an artificial moat in their market, and having these technologies controlled or highlighted as supply chain risks will continue to drive investments in alternatives, especially in other countries where data sovereignty and domestic tech has become a priority given the last decade of the US dominated tech industry.

I don't think that AI is going to go away, but I think the future of AI in the next several years looks alot like massive overfunded foundational model providers collapsing, their employees launching dozens or hundreds of direct competitors, and the leading hyperscalers buying up datacenter capacity the way they bought up dark fiber 20 years ago.

There are lots of folks trying different ways to do this. I think that generative text as a form of writing is a dead end for human creativity and cognition, but I think that there are roles for AI to play, and I am working with my wife to build Oghmere, a writing tool built around the author having full control of writing, and only have the AI elements be able to provide coaching and feedback.

We are almost ready for our full launch, but definitely interested in getting feedback! I posted my take on here last week - https://news.ycombinator.com/item?id=49716388

Older »